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(54) Postage metering system and method for a closed system network 



(57) A postage metering system includes a plurality 
of meter printers (20, 22) operath/ely connected as part 
of a metering network (10) and operating as client meter 
printers (20, 22) on the meter printer network. At least 
one postal security device (40) (PSD) is coupled to at 
least one of the client meter printers (local client meter 
printer). The PSD (40) includes unique identification the 
ability to store postal value and generate digital signa- 
tures. The client meter printers (20, 22) function as a 
postage metering network (10) wherein a client meter 
printer other than the local client meter printer (remote 
client meter printer) requests evidence of postage pay- 



ment from the PSD (40) for concluding a postage me- 
tering transaction. The tocal client meter printer func- 
tions as a meter server and the remote client meter print- 
er functions as a meter client on the postage metering 
network. The remote client meter printer initiates a post- 
age metering transaction in the PSD <40) by sending a 
request for evidence of postage payment to the local cli- 
ent meter printer. The local client meter printer sends 
the request for the evidence of postage payment to the 
PSD (40), receives transaction information from the 
PSD (40) and sends the evidence of payment to the re- 
mote client meter printer for subsequent printing. 
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Description 

[0001] The present invention relates generally to a 
postage metering system and method for printing post- 
age indicia using digital printing meters and, more par- 
ticularly, to a postage metering system and method for 
printing postage indicia in a network of digital printing 
meters. 

[0002] The present application is related to the follow- 
ing European Patent Applications Nos. (Client Ref: E- i 
644, E-645, E-646, E-647, E-649 and E-696), (Attorney 
Ref: 76 354, 76 349, 76 355, 76 395, 76 356 and 76 398) 
all filed concurrently herewith and assigned to the as- 
signee of the present invention. 

[0003] Conventional mechanical and electronic post- i 
age meters have heretofore secured the link between 
printing and accounting. The integrity of the physical 
meter box has been monitored by periodic inspections 
of the meters. Digital printing postage meters, which are 
closed system postage meters, typically include a digital & 
printer coupled to a metering (accounting) device, which 
is referred to herein as a postal security device (PSD). 
Digital printing postage meters have removed the need 
for physical inspection fay cryptographically securing the 
link between the accounting and printing mechanisms. 2t 
In essence, new digital printing postage meters create 
a secure point to point communication link between the 
accounting unit and printhead. See, for example, U.S. 
Patent No. 4,802,218, issued to Christopher B. Wright 
et al and now assigned to the assignee of the present 30 
invention. An example of such digital printing postage 
meters is the Personal Post Oflice™ manufactured by 
the Pitney Bowes Inc. of Stamford, Connecticut. 
. [0004] In even a modest size mailroom it is common 
that several meters are present. It has been shown that 35 
funds can be stored in one central location for batch 
mailing purposes where evidence of postage payment 
for batch mail printed at several printers is evidenced 
through the printing of a statement summarizing the 
postage for the batch of mail. See U.S. Patents Nos. 40 
4,760,532 and 4,837,701, each assigned to the assign- 
ee of the present invention. However, this scheme has 
limitations. For example, a malfunction at the central lo- 
cation can resuit in all of the meters becoming unusable, 
since they have no access to additional funds. In addi- 4S 
tion, in large mailrooms it is common for mail to be proc- 
essed for several different originating zip codes. Since 
each meter is assigned one originating zip code, meters 
are frequently moved from one mailing machine to an- 
other depending upon the mail processing needs. so 
[0005] It has been found that by placing all the meters 
in a mailroom on a network it is possible to print postage 
dispensed from a particular meter on a mailing machine 
other than the one to which it is attached. As a result, if 
any meter on the network fails, postage may be obtained ss 
from another meter on the network. Also, any mailing 
machine on the network may obtain postage from any 
meter, eliminating the need to move a meter from one 



mailing machine to another to comply with postal origi- 
nating zip code requirements. 

[0006] It has been found that a closed metering sys- 
tem can be implemented on a conventional local area, 
s or wide area, network (including infrared and RF net- 
works) to form a "Network Metering System". The Net- 
work Metering System includes a plurality of Client mod- 
ules operatively coupled to a Network Server as part of 
a conventional network. The Network Metering System 
io is configured with at least one PSD coupled to at least 
one of the Client modules, whereby authorized ones of 
the other Client modules on the network can obtain post- 
age value from a PSD that is remote from the requesting 
Client module. Any Client module may have one or more 
is PSDs attached thereto. Each Client module has access, 
if authorized, to both its own local PSD(s), if any, and 
any other Client module's PSD(s) ("remote PSDs") in 
the network. 

[0007] Each Client module runs its own client meter- 
20 ing application to dispense postage and to perform regr 
istration and refill operations. For each PSD in the Net- 
work Metering System, the Client module to which the 
PSD is coupled controls processing transactions for dis- 
pensing postage and registration and refill of the PSD. 
2S When performing such operations, the Client module 
functions as a server for the metering transaction, and 
is referred to herein as a "Meter Server". In a preferred 
embodiment of the Network Metering System the ac- 
counting for debits and credits to the PSD and the log- 
so ging of transactions are performed on the Meter Server. 
Thus, the transaction processing is performed remotely 
when a Client module is accessing a remote PSD. In 
alternate embodiments, the logging of transactions is 
performed on a network server to which the Client mod- 
35 ules are connected ("Network Server"). 

[0006] In the preferred embodiment, modems or in- 
ternet connections for accessing the Data Center are 
located in the Meter Server. In alternate embodiments, 
the modem may be located in the PSD or the Client mod- 
40 ule (or another computer on the network) and the Inter- 
net connection may be in the Client module. 
[0009] It has also been found that the Network Meter- 
ing System can be configured such that each Client 
module dynamically knows which remote PSDs are 
*s available for use by such Client module, and that each 
Meter Server, i.e., each Client module with a PSD cou- 
pled thereto, dynamically knows which Client modules 
are on-line that are authorized to use the PSD coupled 
to the Meter Server 
to [0010] There are several benefits that are realized 
from the present invention. One such benefit relates to 
the postal regulations requiring that the postage printed 
on a metered mailpiece must be obtained from a meter 
licensed from the local post office at which the mailpiece 
s is deposited for mailing, commonly referred to as "origin 
of deposit" or "domain". With a plurality of PSDs acces- 
sible over a network, a user at a Client module is not 
limited to a single PSD having a single origin of deposit 
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or domain. For example, while most mailing machines 
of a network metering system may be configured to de- 
posit their mailpieces in the Post Office in Shelton, Con- 
necticut, other mailing machines may be configured to 
deposit their mailpieces at different origins of deposit, 
such as New Haven, Connecticut. Furthermore, a Client 
module that is physically connected to a PSD with an 
origin zip of Shelton, Connecticut, may be processing 
mail to be deposited in New Haven, Connecticut. Since 
the New Haven acceptance mail facility, is open later 
than the Shelton Facility. The present invention provides 
each Client module on the network with access to sev- 
eral PSDs having different origins of deposit. 
[0011] Another benefit of the present invention is that 
mailpiece generation does not have to be interrupted 
because of PSD funds limitation. For example, when a 
large mail run requires more postal value than is stored 
on a single PSD, the Client module can access another 
PSD on the network to complete the mail run without 
haying to interrupt the mail run to refill the PSD that is 
low on funds. 

[0012] The present invention provides a postage me- 
tering system that includes a plurality of meter printer 
modules (also referred to herein as meter modules and 
meter printers) operatively connected as part of a me- 
tering network and operating as client meter printers on 
the metering network. At least one postal security device 
(PSD) is coupled to at least one of the client meter print- 
ers (local client meter printer). The PSD includes unique 
identification and the ability to store postal value and 
generate digital signatures. The client meter printers 
function as a postage metering network wherein a client 
meter printer other than the local client meter printer (re- 
mote client meter printer) requests evidence of postage 
payment from the PSD for concluding a postage meter- 
ing transaction. The local client meter printer functions 
as a meter server and the remote client meter printer 
functions as a meter client on the postage metering net- 
work. The remote client meter printer initiates a postage 
metering transaction in the PSD by sending a request 
for evidence of postage payment to the local client meter 
printer. The local client meter printer sends the request 
for the evidence of postage payment to the PSD, re- 
ceives transaction information from the PSD and sends 
the evidence of payment to the remote client meter print- 
er for subsequent printing. 

[001 3] The above and other objects and advantages 
of the present invention will be apparent upon consider- 
ation of the following detailed description, taken in con- 
junction with accompanying drawings, in which like ref- 
erence characters refer to like parts throughout, and in 
which: 



Fig. 1 is a block diagram of a Network Metering Sys- 
tem with PSDs couple to Client modules in accord- 
ance with the preferred embodiment of the present 
invention; 

Fig. 2 (2A and 2B) are block diagrams of alternate 
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embodiments of a Network Metering System with 
PSDs couple to Client modules with a centralized 
transaction log; 

Fig. 3 is a block diagram of a Client module; . 
s . Fig. 4 is a block diagram of the preferred embodi- 
ment of a Network Metering System of Fig. 1 with a 
Client module in Meter Server mode; and 
Fig. 5 is a flow chart of a Client module operation. 

10 [0014] Networking schemes for PC metering, which 
have been disclosed in the previously noted related ap- 
plications, allow each client on a network to dynamically 
maintain a list of available Postal Security Devices 
(PSDs), or meters, on the network. Related European 
Patent Application Nos. (Client Ref: E-644 and E-645) 
(Attorney Ref: 76 354 and 76 349) describe the dynamic 
management of several open system PSDs on a net- 
work. It is well known that PC meters use open system 
meters. An open system meter's printing unit rs not cou- 
pled to its PSD. However, in a conventional closed sys- 
tem the accounting unit (also referred to herein as PSD) 
and printing unit are coupled via a secure point to point 
communication link. The present invention extends the 
open system networking schemes to closed systems or 
traditional meters. It has been found that by placing 
closed system PSDs on a network the same techniques 
may be used by mailing machines and PSDs to dynam- 
ically maintain a list of available PSDs and printers. In 
addition, a secure communications link can be routed 
over the closed system network from any PSD to any 
printing unit, allowing any mailing machine to print post- 
age dispensed by any PSD on the network. 
[0015] In describing the present invention, reference 
is made to the drawings, wherein there is seen in Figs. 
1 -2, alternate embodiments of a Network Metering Sys- 
tem. Fig. 1 shows the preferred embodiment of the 
present invention. A Network Metering System, gener- 
ally designated 10, includes a plurality (five are shown) 
of Client modules 20 conventionally coupled to a Net- 
work Server 30, 6uch as a personal computer. The Cli- 
ent modules are digital printers that are dedicated to 
printing postage indicium and meter or PSD related in- 
formation, such as refill receipts and inspection cards. 
Each Client module resembles a conventional digital 
metering system with optional display, keyboard, and 
printer 22, however, some of the Client modules do not 
have an accounting module or PSD attached thereto. 
Preferably, a plurality of PSDs 40 (two are shown) exists 
in Network Metering System 10, with at least one PSD 
40 being coupled to several Client modules 20. The 
PSDs 40 are accounting modules similar to accounting 
units in conventional electronic postage meters. When 
a specific PSD 40 is accessed for a metering transac- 
tion, the Client module 20, to which the PSD 40 is at- 
tached, becomes a Meter Server 21 (shown within pa- 
rentheses) for the remainder of the transaction. When 
the PSD 40 is being accessed by the Client module 20 
to which the PSD is coupled the Client module 20 is 
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functioning as a conventional meter. 
[0016] Referring now to Fig. 3, a Client module 20 in- 
cludes a microprocessor 100 coupled to memory mod- 
ules RAM 102, ROM 104 and non-volatile memory 
* (NVM) 106 and to user interface modules display 112 
and keypad 1 1 4. Client module 20 further includes a net- 
work interface 1 20, a PSD interface 1 22 and an optional 
modem 1 24. ROM 1 04 contains the operating programs 
from Client module 20 including a Meter Toolkit 110 
which is described below. NVM 106 stores transaction 
and accounting logs for the Client module 20, network 
I D for the client module 20, and a preference list of avail- 
able PSDs on the network (described below). Client 
module 20 physically connects to the network through 
network interface 120. PSDs are optionally connected 
to Client module 20 through PSD interface 122. Com- 
munications to a Data Center 5 (Figs 1 and 2) are made 
through optional modem 124. Printer 22 includes a se- 
cure printhead 130, sensors 132 for sensing printing 
functions, and motors 1 34 for activating printer functions 
and controlling the flow of mailpieces through the sys- 
tem. Printer 22 is coupled to Client module 20 in a con- 
ventional manner, whereby microprocessor 100 con- 
trols printhead 1 30. 

[0017] The printer may be unsecured or may be se- 
curely coupled as described in European Patent Appli- 
cation No. 981 09736.3 filed May 28, 1 998, entitled SYN- 
CHRONIZATION OF CRYPTOGRAPHIC KEYS BE- 
TWEEN TWO MODULES OF A DISTRIBUTED SYS- 
TEM and assigned to the assignee of the present inven- 
tion, or in U.S. Patent No. 4,802,218, issued to Christo- 
pher B. Wright et al and now assigned to the assignee 
of the present invention. 

[001 8] It has been found that the printer may be a con- 
ventional mailing machine, such as Paragon™, manu- 
factured by Pitney Bowes of Stamford, Connecticut, or 
may be a printer dedicated to printing some type of in- 
dicium, for example a label printer. 
[0019] Client module 20 processes the functions for 
PSD registration, PSD refill, and postage dispensing as 
transactions for any PSD 40 coupled thereto. Process- 
ing is performed locally by metering software compo- 
nent 110 (referred to herein as "Meter Toolkit"). In the 
preferred embodiment, Meter Toolkit 110 is a program 
module with interfaces to perform metering operations. 
One such interface maintains a list of local and remote 
PSDs on the network. This interface maintains a current 
list of all known and attached PSDs at the time it is in- 
stantiated. Meter Toolkit 110 includes the following com- 
ponents: a transaction handler, a vault interface, a trans- 
action log handler and an optional secure communica- 
tions handler as described in the previously noted Eu- 
ropean Patent Application No. 98109736.3 and U.S. 
Patent No. 4,802,218. Connections to the Data Center 
5 can be made locally from the Client module 20, in 
stand-alone mode via modem 124. Accounting for deb- 
its and credits to the PSD are also performed locally, 
logging the transactions in the NVM 1 06. In this manner, 



the transaction processing and funds accounting are 
centralized on the Client module operating a stand- 
alone meter. The Meter Toolkit 110 provides standard 
metering functions, such as dispensing postage, PSD 
s refills, and PSD registration and secure communica- 
tions. The Meter Toolkit 110 resides in all Meter Servers 
and remote Client modules capable of printing postage. 
Client module 20 can access local or remote PSDs us- 
ing Meter Toolkit 110. The Meter Toolkit 110 provides a 
10 list of the available PSDs from which a desired PSD for 
a particular transaction is selected. Using Meter Toolkit 
110 the Client module 20 may automatically select a 
secondary PSD if the desired PSD is unavailable due to 
malfunction or lack of funds. Optionally, a user may 
is specify the desired PSD. 

[0020] Examples of a conventional digital metering 
system are PostPerfect™ and Personal Post Officer™ 
meters manufactured by Pitney Bowes Inc. of Stamford, 
Connecticut. It will be understood by those skilled in the 
20 art that conventional electronic meters, such a the A900 
meter, which is also manufactured by Pitney Bowes Inc. 
of Stamford, Connecticut, may also be configured into 
a network. However, the configuration will be somewhat 
more involved than the network configuration of the pre- 
zs ferred embodiment for digital meters. 

[0021] In the preferred embodiment, the postal funds 
accounting and the transaction processing occur in the 
Meter Server 21 . It will be understood that this is a de- 
centralized approach concerning funds accounting and 
30 transaction accounting because each Client module 20 
having a PSD 40 attached thereto maintains accounting 
information (departmental accounting registers 42) and 
transaction information (transaction logs 44) relating to 
transactions occurring only at its PSD 40. 
35 [0022] Figs. 2A and 2B show alternate embodiments 
of the present invention. Network Metering System, 
generally designated 10', includes a plurality (five are 
shown) of Client modules 20 conventionally coupled to 
a network server 30. Each PSD 40 (two are shown) of 
40 Network Metering System 1 0' is coupled to one of Client 
modules 20. Each Client module includes a convention- 
al digital metering system with display, keyboard, and 
printer 22. As in the preferred embodiment, a plurality 
of PSDs exists in Network Metering System 1 0\ with at 
45 least one PSD 40 being coupled to several Client mod- 
ules 20. When the specific PSD is accessed for a me- 
tering transaction, the Client module 20, to which the 
PSD 40 is attached, becomes a Meter Server 21 for the 
remainder of the transaction (Fig. 4). In this embodiment 
so the postal funds accounting occurs in Meter Server 21 
when the transaction has been concluded. However, the 
transaction processing occurs at Network Server 30. It 
will be understood that this is a decentralized approach 
concerning funds accounting because each Client mod- 
ss ule 20 that has a PSD 40 attached thereto maintains 
accounting information (accounting registers 42) relat- 
ing to transactions occurring only at its PSD. However, 
this embodiment provides a centralized approach con- 
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earning transaction accounting because one of the Me- 
ter Servers 21 (Fig. 2A) or Network Server 30 (Fig. 2B) 
maintains transaction information (transaction logs 44) 
relating to transactions occurring at any PSD. 
[0023] Referring again to Figs. 1 and 2, Network Me- 
tering Systems 10 and 10* are configured with one or 
more PSDs 40 coupled to one or more Client modules 
20. In such configurations, the Client module 20 be- 
comes a Stand-alone Meter when a metering transac- 
tion is processed locally on its coupled PSD 40. When 
operating as a Stand-alone Meter, such Client module 
20 performs the previously described metering transac- 
tion, acting as both the requesting Client module and 
the Meter Server. As a Stand-alone Meter, Client mod- 
ule 20 can only access the PSD 40 coupled to it. There 
is no remote vault access when a Client module is 
processing a metering transaction on the local PSD. 
[0024] The network concept provides mechanisms for 
a remote Client module to gain access rights to the Me- 
ter Toolkit component in a Meter Server. Optionally, eve- 
ry Client module can be given access rights to the Meter 
Server, whereby the Meter Server's PSD PIN (pass- 
word) can be used to authorize access to postage func- 
tions in the Meter Server and its PSD. By default, all 
PSDs are considered remotely accessible by all Client 
modules unless configured differently by the user. Alter- 
natively, the list of available PSDs can be customized 
based on user or system filters. For example, only shar- 
ing PSDs whose origin zip match the origin ZIP of the 
local PSD. 

[0025] Meter Toolkit 110 provides postal funds secu- 
rity because the user can not print an indicium without 
accounting for a debit to the PSD. The Meter Toolkit us- 
es atomic transactions to tie the debit to PSD with the 
enabling of printing of the indicium image. The atomic 
transaction ensures that the debit to the PSD is com- 
plete before printing the indicium. In addition, the Meter 
Toolkit 110 may establish a secure link between the PSD 
40 and meter printer 20 as described in the previously 
noted European Patent Application No. 981 09736.3 and 
U.S. Patent No. 4,802,218. 

[0026] The transaction log stores funds transactions 
for PSD dispensing and refills. For Network Metering 
System 10, each Client module stores the daily trans- 
action log file for its local PSD(s). For Network Metering 
System 10', each Client module forwards transaction in- 
formation for its local PSD(s) to Network Server 30 
which stores the daily transaction log file. Once the ac- 
counting for a mailpiece transaction is completed, the 
Client module requesting the transaction prints the ind- 
icium. 

[0027] Network Metering System (1 0 or 1 0') has many 
Client modules with or without PSD(s) attached. Each 
Client module has access to both its own local PSD(s) 
and remote PSDs in the network. Each Client module 
can dispense postage and initiate registration and refills. 
[0028] As previously stated, Network Metering Sys- 
tem (10 or 10') processes transactions for dispensing 



postage, PSD registration, and PSD refill on the Client 
module 20 where the specific PSD 40 is located. This 
requires the transaction processing to be performed re- 
motely if the Client module is accessing a remote PSD. 

s Modems for accessing Data Center 5 are preferably lo- 
cated on the each Client module 20 having a PSD 40 
coupled thereto. However, a single modem may be lo- 
cated on the Network Server 30 instead of several mo- 
dems on each Client module 20 having a PSD 40 cou- 

io pled thereto. In this manner, PSD registrations, and PSD 
refills are processed through Network Server 30. 
[0029] Referring now to Fig. 4, a Client module 20 en- 
ters Meter Server 21 mode when another Client module 
20 on the network initiates remote access of PSD 41 

15 through its Meter Toolkit 110. Meter Server 21 process- 
es the functions for PSD registration, PSD refill, and 
postage dispensing as transactions for PSD 41 . 
Processing is performed at Meter Server 21 by the pre- 
viously described Meter Toolkit 110 residing in Meter 

zo Server 21 and at Client module 20 by the Meter Toolkit 
110 residing in Client module 20. 
[0030] The Meter Toolkits 110 residing in the Client 
module 20 and the Meter Server 21 operate in conjunc- 
tion with each other such that the remote requesting Cli- 

25 ent module 20 and Meter Server 21 operate collectively 
as a meter. The Meter Toolkit 110 residing in Meter Serv- 
er 21 handles messages from and to the requesting Cli- 
ent module 20, and handles standard metering func- 
tions, such as dispensing postage, PSD refills, and PSD 

30 registration, for PSD 41 in the same manner as when in 
stand-alone mode. 

[0031] Referring now to Fig. 6, at step 300 Meter 
Toolkit 110 checks for a local request for printing an in- 
dicium on a mailpiece by the local Client module. If no 

35 request is detected, then the process continues at step 
322 described below. If a request is detected, then, at 
step 302, Meter Toolkit 110 checks if the user has pre- 
viously requested an origin zip different from the origin 
zip of the local Client module. If the request is for a dif- 

40 ferent origin zip, then, at step 304, it checks if a remote 
PSD having the requested zip is available. If available, 
at step 306, local client module 20 through its Meter 
Toolkit 110 requests access to the remote PSD. If not 
available then an error is reported. If access is granted, 

45 at step 308, then at step 310, local client module 20 re- 
quests postage from the remote PSD. If access is not 
granted then an error is reported. 
[0032] At step 31 2, the PSD authenticates to the print- 
head in the Client module. If the authentication is sue- 

so cessfully completed, at step 314, then, at step 31 6; the 
PSD performs postal accounting and generates a sig- 
nature for the transaction. At step 318, the PSD sends 
transaction information, including the signature, to the 
Client module. At step 320, the Client module prints an 

55 indicium. 

[0033] At step 322, Meter Toolkit 1 1 0 checks for a re- 
quest from a remote Client module for access to the fo- 
cal PSD. If no request has been received, the process 
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continues at step 300. If a request has been received, 
then, at step 324, Meter Toolkit 110 allows remote ac- 
cess to PSD and processes the request from the remote 
Client through completion at step 326. 
[0034] If at step 302, the user has not requested a dif- 
ferent origin zip than the local PSD, then, at step 311, 
Meter Toolkit 110 checks if the local PSD is available to 
respond to the request, tf the local PSD is available then 
the process continues at step 310 which is described 
above. If not available, the Meter Toolkit 1 10 checks the 
availability of remote PSDs at step 304 above. 

Networked Operations 

[0035] Through the use of Meter Toolkit 110 meter 
printers 20 can communicate via a mechanism referred 
to as connection points, which can be used to implement 
direct communication, mufti-casting (more than one cli- 
ent receives messages), or broadcasting (all clients re- 
ceive messages). This can be done between processes 
on the same meter printer or multiple meter printers on 
a network or on the internet. Mail slots is another mech- 
anism that permits the same communications facilities. 
The Meter Toolkit 110 uses these facilities to exchange 
information about the location and disposition of PSDs 
on the network. 

[0036] When a Client module logs into the network, 
the Meter Toolkit 110 running on the Client module reg- 
isters the necessary connection points; one common to 
all Meter Toolkits on the network, and one specific to the 
Client module itself. The common connection point is 
used to send and receive multi-casted messages from 
all Clients. The specific connection point is for messag- 
es intended solely for one particular Client module Meter 
Toolkit, such as a request or response for evidence of 
postage payment. 

[0037] Upon initialization, the Client module's Meter 
Toolkit 110 uses the common connection point to send 
a message for all other Meter Toolkits to respond with 
available PSDs. Meter Toolkits running on Meter Serv- 
ers 21 then respond to the Client module's specific con- 
nection point with information about the location and 
identities of any attached PSDs. Referring to figure 2A, 
the list of available PSDs is consolidated and presented 
to applications that require postage metering functions. 
Referring to Figure 2B, the list of available PSDs is con- 
solidated along with locally attached PSDs and the com- 
plete list presented to applications that require postage 
metering functions. In this case, the Meter Toolkit 110 
also sends messages to the common Meter Toolkit con- 
nection points indicating that another PSD is available 
for use by other Meter Toolkits. 
[0038] When a remote Client module 20 selects a 
PSD 40 to use, the Meter Toolkit 110 uses the informa- 
tion collected at initialization to know where the partic- 
ular PSD is located, and how to communicate with it. 
[0039] In operation, the Meter Toolkit 110 also han- 
dles messages regarding the status of Meter Toolkits 



1 1 0 on the network. Should new Meter Toolkits be start- 
ed on other Client modules 20, the local Meter Toolkit 
responds with information regarding any attached PSDs 
40. Should messages be received indicating that a new 
s Meter Client 20 has come on-line with its own PSD(s) 
40, the Meter Toolkit updates its fist of available PSDs. 
Similarly, if a Client module 20 is shutting down, mes- 
sages are sent to all Client modules indicating that any 
local PSDs will no longer be available. It is noted that all 
to messages between Meter Toolkits 1 1 0 can be encrypted 
for added security. 

[0040] The effect of the Client module Startup and 
Shutdown multi-casts is that all Client modules 20 dy- 
namically know exactly which PSDs 40 are available. 
is Clients also have the ability to ask explicitly for a re- 
freshed list of available PSDs 40 since it is possible that 
a meter printer can go off-line without proper notification. 
Meter Toolkit 1 1 0 also provides mechanisms for this with 
continual pinging to catch computers improperly notify- 
so ing clients/servers. 

Centralized vs. Distributed Processing On the Network 

[0041] A Metering system must account for funds for 
25 all mail pieces and refills. This requires saving transac- 
tion records in a sequential transaction log file. Both 
postage dispensing and refills should be kept in the 
same sequential file such that meter discrepancies, 
such as discrepancies due to meter movement between 
50 Client modules on the network, can be reconciled. The 
following paragraphs summarize the impact of using 
centralized vs. decentralized accounting for the trans- 
action tog on a network metering system. 
[0042] In a network metering configuration, if account- 
55 ing for funds is summarized by a user, transactions 
could be logged where the user is tocated. This would 
require consolidating log files only if the user has more 
than one meter printer at which transactions can be in- 
itiated, i.e., the user moves between meter printers). 
This method uses decentralized accounting, logging 
transactions on the user's meter printer. 
[0043] If accounting for funds is summarized by a me- 
ter, transactions should be logged where the meter, i.e. 
the PSD, is tocated. This would require consolidating log 
45 files only if the PSD could be attached to any meter print- 
er (PSD moves between meter printers). This method 
uses decentralized accounting, logging transactions on 
the PSD's meter printer. 

[0044] If accounting for funds is summarized by de- 
so partment (i.e. departments have several users that can 
access several PSDs), transactions must be consolidat- 
ed if the logging of transactions was performed where 
the user is located or where the PSD is located. 
[0045] An alternative to such consolidation of log files 
from meter printers is a centralized accounting and log- 
ging of all transactions on same or a centralized server. 
Transactions would have to be sent to the Network Serv- 
er for every mail piece, producing heavy network traffic. 
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If the centralized server is down, or otherwise not avail- 
able, then no postage dispensing or refills can occur, 
disabling metering capabilities over the entire network. 
A centralized server for Network Metering System is not 
the preferred embodiment of the present invention. 
[0046] N etwork Metering Systems 1 0 and 1 0* are rep- 
resentative of distributed processing of the metering 
transaction. Network Metering System 10 involves local 
transaction processing requested by a requesting Client 
. module 20, and remote accounting and logging at the 
Meter Server 21 , i.e., where the PSD 40 and transaction 
log file 44 are located. Network Metering System 10' in- 
volves local transaction processing by the requesting 
Client module 20, remote accounting at the Meter Serv- 
er 21 , i.e., where the PSD 40 is located, and remote log- 
ging at the Network Server 30, i.e. where transaction tog 
file 44 is located. Thus, the transaction processing is 
split from the accounting functionality in distributed 
processing. The steps of the transaction are split be- 
tween different meter printers of the network: 
[0047] There is an advantage to configuring network 
metering for distributed processing, such as In Network 
Metering Systems 10 and 10'. If Network Server 30 is 
down, metering transactions may still be performed 
when Client modules having PSDs coupled thereto op- 
erate in 6tand-alone mode. Furthermore, network-me- 
tering transactions may be performed even when a Cli- 
ent module 20 with a PSD attached thereto is not logged 
on the network; For example, the Client module not 
logged on the network can operate in stand-alone mode, 
and the Client modules logged on the network can ac- 
cess other Client modules having PSDs coupled there- 
to. 

[0048] When a Client module is attempting to access 
remote PSDs on the network, an optional prioritized list 
of available PSDs can be set up for automatic selection 
by the Client module 20. The prioritized ordering of the 
available PSDs may use the following heuristics: 

1 . Local PSDs (same location as the Client module) 

2. Remote PSDs sharing the same origin ZIP as the 
local PSDs 

3. PSDs having the same three digit ZIP as items 
1-3 

4. Remaining PSDs 

[0049]' The present invention has been described for 
credit locking meters, i.e. those with ascending and de- 
scending registers commonly referred to as prepayment 
systems. It is noted, however, that the present invention 
is also suitable for use in current account register sys- 
tems, i.e., those with only an ascending register com- 
monly referred to as post-payment systems. 
[0050] It will be understood that although the embod- 
iments of the present invention are described as post- 
age metering systems, the present invention is applica- 
ble to any value metering system that includes transac- 
tion evidencing, such as monetary transactions, item 



transactions and information transactions. While the 
present invention has been disclosed and described 
with reference to embodiments thereof, it will be appar- 
ent, as noted above, that variations and modifications 
s may be made therein. It is, thus, intended in the following 
: claims to cover each variation and modification that falls 
within the true spirit and scope of the present invention. 
[0051] Personal Post Office. PostPerfect and Para- 
gon are all trademarks of Pitney Bowes Inc.. . 



Claims 

1. A transaction evidencing system comprising: 

a plurality of meter printers (20, 22) operatively 
connected as part of a metering network (10) 
and operating as client meter printers on the 
meter printer network; 

£0 at least one security device (40) coupled to at 

least one of the client meter printers (20, 22) 
(local client meter printer), said security device 
including unique identification, value storage 
means and digital signature means; and 

25 means in said client meter printers for function- 

ing as a transaction evidencing network where- 
in a client meter printer other than the local cli- 
ent meter printer (remote client meter printer) 
is operable to request and obtain transaction 

30 evidencing from the security device for con- 

cluding a transaction at the remote client meter 
printer. 

2. The system of claim 1 wherein the local client meter 
35 printer (20, 22) f unctions as a transaction server 

and the remote client meter printer functions as a 
transaction client on the transaction evidencing net- 
work (10). 

3. The system of claim 1 or 2 wherein the remote client 
meter printer is operable to initiate transaction ac- 
counting in the security device by sending a request 
for transaction evidencing to the local client meter 
printer, said local client meter printer is operable to 
send the request for the transaction evidencing to 
the security device, and said local client meter print- 
er is operable to receive transaction information 
unique to the requested transaction evidencing, 
said transaction information including a digital sig- 
nature, and wherein said local client meter printer 
is operable to send at least the digital signature to 
the remote client meter printer. 

4. The system of claim 3 wherein the transaction evi- 
dencing is sent from the local client to the remote 
client meter printer for subsequent printing. 

5. The system of claim 3 or 4 wherein the remote client 
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meter prints evidence of the transaction, said evi- 
dence including the digital signature. 

The system of any one of claims 1 to 5 wherein the 
local client meter printer includes means for main- 
taining transaction information relating to transac- 
tion evidencing processed by the security device 
(40). 

The system of any one of the preceding claims 
wherein the local client meter printer is operable to 
determine whether the remote client meter printer 
is authorized to request the transaction evidencing 
from the security device (40) before sending the re- 
quest to the security device. 

The system of any one of the preceding claims 
wherein the security device (40) is operable to de- 
termine whether the remote client meter printer is 
authorized to request the transaction evidencing 
from the security device (40) before performing the 
transaction evidencing. 

The system of any one of the preceding claims 
wherein the security device (40) is operable to gen- 
erate the digital signature and to perform account- 
ing for the transaction, said local client meter printer 
being operable to store transaction information re- 
ceived from the security device (40). 

The system of any one of claims 1 to 8 wherein the 
security device (40) is capable to generate the dig- 
ital signature and to perform accounting for the 
transaction, said local client meter printer being op- 
erable to send all transaction information received 
from the security device (40) to a network server 
(30) for the meter printer network (10). 

The system of any one of the preceding claims 
wherein a plurality of security devices (40) are cou- 
pled to a subset of the client meter printers (20,22). 

The system of any one of the preceding claims, fur- 
ther comprising: 

means in the remote client meter printer (20, 
22) for initiating a transaction including means 
for sending a request for a transaction evidence 
to the local client meter printer; 
means in said local client meter printer for for- 
warding the request for the transaction evi- 
dence to the security device (40); 
means in said local client meter printer for re- 
ceiving from the security device (40) transac- 
tion information including the transaction evi- 
dence and a digital signature unique to the 
transaction; 

means for sending at least the transaction evi- 
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dence and the digital signature to the remote 
client meter printer; and 
means in said remote client meter printer for 
generating an indicium, including the transac- 
tion evidence and the digital signature, for the 
transaction. 

The system of any one of the preceding claims 
wherein the transaction evidencing system is a 
postage meter. 
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14. A method for printing postage on a mailpiece, the 
method comprising the steps of: 

connecting a plurality of meter printers (20, 22) 
as part of a metering network (10); 
providing a postal security device (40) (PSD) 
coupled to at least one of said plurality of meter 
printers, wherein the other of said plurality of 
meter printers are remote to the PSD, the PSD 
(40) being a secure processor-based account- 
ing device that dispenses and accounts for 
postal value stored therein; 
sending a request from the remote meter print- 
er (20, 22) to the local meter printer for an 
amount of the postal value stored in the PSD 
(40), the request comprising postal information, 
including data representative of the amount of 
the postal value to be printed on a maiipiece by 
the remote meter printer, 
dispensing the requested amount of postal val- 
ue by generating in the PSD (40) a digital sig- 
nature representing the requested amount and 
accounting for the requested amount; 
sending the digital signature arid the transac- 
tion information from the PSD (40) to the local 
meter printer (20, 22); 

sending the digital signature and at least some 
of the transaction information from the local me- 
ter printer to the remote meter printer; and 
printing an indicium including the digital signa- 
ture on the mailpiece. 

15. The method of claim 14, further comprising the 
steps of: 

verifying at the local meter printer that the re- 
mote meter printer is authorized to access the post- 
al value stored in the PSD. 

16. A method for printing postage on a mailpiece, the 
method comprising the steps of: 

connecting a plurality of meter printers (20, 22) 
as part of a metering network (1 0); 
providing first and second postal security de- 
vices (40) (PSD) coupled to first and second of 
said plurality of meter printers, the PSD (40) be- 
ing a secure processor-based accounting de- 
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vice that dispenses and accounts for postal val- 
ue stored therein; and 

automatically sending a request from the first 
local meter printer to the second local meter 
printer for an amount of the postal value stored s 
in the second PSD, when the first PSD is una- 
vailable for providing an amount of postal val- 
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